Weaknesses of type CWE-125

6,000 results

Leitura fora dos limites de memória

Quando o código tenta ler dados além do tamanho alocado de um buffer, array ou estrutura de dados. O programa acessa memória que não deveria, podendo vazar informações sensíveis, causar travamento ou ser explorado para executar código arbitrário.

Example

Um validador de imagem PNG que lê o tamanho do chunk do header mas não verifica se esse tamanho é compatível com o arquivo; ao processar, lê bytes da memória adjacente, expondo dados de outras estruturas ou causando crash.

How to mitigate

Sempre validar comprimentos e índices antes de acessar buffers; usar funções seguras (strncpy em vez de strcpy, bounds checking em loops); compilar com sanitizadores (AddressSanitizer, Valgrind) para detectar em tempo de teste.

CVE-2024-20653HIGHMicrosoft Common Log File System Elevation of Privilege VulnerabilityEPSS 4.5%CVE-2020-9675HIGHAdobe Bridge versions 10.0.3 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to arbitrary code execEPSS 4.4%CVE-2019-11041MEDIUMheap-buffer-overflow on exif_scan_thumbnail in EXIF extensionEPSS 4.4%CVE-2019-11042MEDIUMheap-buffer-overflow on exif_process_user_comment in EXIF extensionEPSS 4.4%CVE-2019-11035MEDIUMHeap over-read in PHP EXIF extensionEPSS 4.4%CVE-2021-27270HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaEPSS 4.4%CVE-2021-20277—A flaw was found in Samba's libldb. Multiple, consecutive leading spaces in an LDAP attribute can lead to an out-of-bounds memory write, leaEPSS 4.4%CVE-2022-21723CRITICALOut-of-bounds read in multipart parsing in PJSIPEPSS 4.4%CVE-2021-28621HIGHAdobe Animate FLA File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 4.3%CVE-2020-7067HIGHOOB Read in urldecode()EPSS 4.3%CVE-2020-7064MEDIUMUse-of-uninitialized-value in exifEPSS 4.3%CVE-2019-6735—This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader. User interaction iEPSS 4.3%CVE-2019-6733—This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit PhantomPDF. User interactiEPSS 4.3%CVE-2021-40729LOWAdobe Acrobat Reader DC PDF Out-of-Bound Read Vulnerability Information DisclosureEPSS 4.3%CVE-2024-30025HIGHWindows Common Log File System Driver Elevation of Privilege VulnerabilityEPSS 4.3%CVE-2021-36079HIGHAdobe Bridge SGI File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 4.3%CVE-2020-8852LOWThis vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 9.7.0.29455. User intEPSS 4.2%CVE-2020-9749HIGHOut-of-bounds read vulnerability in Adobe Animate 20.5EPSS 4.1%CVE-2018-16451CRITICALThe SMB parser in tcpdump before 4.9.3 has buffer over-reads in print-smb.c:print_trans() for \MAILSLOT\BROWSE and \PIPE\LANMAN.EPSS 4.1%CVE-2019-3823MEDIUMlibcurl versions from 7.34.0 to before 7.64.0 are vulnerable to a heap out-of-bounds read in the code handling the end-of-response for SMTP.EPSS 4.1%